krb5_error_code
krb5_rc_default(krb5_context context, krb5_rcache *id)
{
krb5_error_code retval;
if (!(*id = (krb5_rcache )malloc(sizeof(**id))))
return KRB5_RC_MALLOC;
retval = krb5_rc_resolve_type(context, id, krb5_rc_default_type(context));
if (retval != 0) {
/*
* k5_mutex_destroy() is not called here, because the mutex had
* not been successfully initialized by krb5_rc_resolve_type().
*/
FREE_RC(*id);
return (retval);
}
retval = krb5_rc_resolve(context, *id, krb5_rc_default_name(context));
if (retval) {
k5_mutex_destroy(&(*id)->lock);
FREE_RC(*id);
return retval;
}
(*id)->magic = KV5M_RCACHE;
return retval;
}
krb5_error_code KRB5_CALLCONV
krb5_get_server_rcache(krb5_context context, const krb5_data *piece,
krb5_rcache *rcptr)
{
krb5_rcache rcache = 0;
char *cachename = 0, *def_env = 0, *cachetype;
char tmp[4], *full_name;
krb5_error_code retval;
int p, i;
unsigned int len;
#ifdef HAVE_GETEUID
unsigned long tens;
unsigned long uid = geteuid();
#endif
if (piece == NULL)
return ENOMEM;
cachetype = krb5_rc_default_type(context);
/*
* Solaris Kerberos: Check to see if something other than the default replay
* cache name will be used. If so then skip over the construction of
* said name.
*/
if ((def_env = krb5_rc_default_name(context)) != 0) {
cachename = strdup(def_env);
if (cachename == NULL)
return (ENOMEM);
/*
* We expect to have the fully qualified rcache name (<type>:<name>),
* so we populate the default type here if the type is missing.
*/
if (strchr(cachename, ':') == NULL) {
full_name = malloc(strlen(cachetype) + 1 +
strlen(cachename) + 1);
if (full_name == NULL) {
free(cachename);
return(ENOMEM);
}
(void) sprintf(full_name, "%s:%s", cachetype, cachename);
free(cachename);
cachename = full_name;
}
goto skip_create;
}
len = piece->length + 3 + 1;
for (i = 0; i < piece->length; i++) {
if (piece->data[i] == '-')
len++;
else if (!isvalidrcname((int) piece->data[i]))
len += 3;
}
#ifdef HAVE_GETEUID
len += 2; /* _<uid> */
for (tens = 1; (uid / tens) > 9 ; tens *= 10)
len++;
#endif
cachename = malloc(strlen(cachetype) + 5 + len);
if (!cachename) {
retval = ENOMEM;
goto cleanup;
}
strcpy(cachename, cachetype);
p = strlen(cachename);
cachename[p++] = ':';
for (i = 0; i < piece->length; i++) {
if (piece->data[i] == '-') {
cachename[p++] = '-';
cachename[p++] = '-';
continue;
}
if (!isvalidrcname((int) piece->data[i])) {
sprintf(tmp, "%03o", piece->data[i]);
cachename[p++] = '-';
cachename[p++] = tmp[0];
cachename[p++] = tmp[1];
cachename[p++] = tmp[2];
continue;
}
cachename[p++] = piece->data[i];
}
#ifdef HAVE_GETEUID
cachename[p++] = '_';
while (tens) {
cachename[p++] = '0' + ((uid / tens) % 10);
tens /= 10;
}
#endif
cachename[p++] = '\0';
skip_create:
retval = krb5_rc_resolve_full(context, &rcache, cachename);
if (retval) {
rcache = 0;
goto cleanup;
}
/*
* First try to recover the replay cache; if that doesn't work,
* initialize it.
*/
retval = krb5_rc_recover_or_initialize(context, rcache, context->clockskew);
if (retval) {
krb5_rc_close(context, rcache);
rcache = 0;
goto cleanup;
}
*rcptr = rcache;
rcache = 0;
retval = 0;
cleanup:
if (rcache)
krb5_xfree(rcache);
if (cachename)
krb5_xfree(cachename);
return retval;
}
KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL
krb5_rc_default(krb5_context context,
krb5_rcache *id)
{
return krb5_rc_resolve_full(context, id, krb5_rc_default_name(context));
}
